diff --git a/docs/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md b/docs/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md index f7a15e9de27..8f291a22390 100644 --- a/docs/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md +++ b/docs/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md @@ -19,7 +19,7 @@ The following table lists the ports that need to be open to and from nodes that The port requirements differ based on the Rancher server architecture. -Rancher can be installed on any Kubernetes cluster. For Rancher installs on a K3s, RKE, or RKE2 Kubernetes cluster, refer to the tabs below. For other Kubernetes distributions, refer to the distribution's documentation for the port requirements for cluster nodes. +Rancher can be installed on any Kubernetes cluster. For Rancher installs on a K3s or RKE2 Kubernetes cluster, refer to the tabs below. For other Kubernetes distributions, refer to the distribution's documentation for the port requirements for cluster nodes. :::note Notes: @@ -70,52 +70,6 @@ The following tables break down the port requirements for inbound and outbound t -### Ports for Rancher Server Nodes on RKE - -
- Click to expand - -Typically Rancher is installed on three RKE nodes that all have the etcd, control plane and worker roles. - -The following tables break down the port requirements for traffic between the Rancher nodes: - -
Rules for traffic between Rancher nodes
- -| Protocol | Port | Description | -|-----|-----|----------------| -| TCP | 443 | Rancher agents | -| TCP | 2379 | etcd client requests | -| TCP | 2380 | etcd peer communication | -| TCP | 6443 | Kubernetes apiserver | -| TCP | 8443 | Nginx Ingress's Validating Webhook | -| UDP | 8472 | Canal/Flannel VXLAN overlay networking | -| TCP | 9099 | Canal/Flannel livenessProbe/readinessProbe | -| TCP | 10250 | Metrics server communication with all nodes | -| TCP | 10254 | Ingress controller livenessProbe/readinessProbe | - -The following tables break down the port requirements for inbound and outbound traffic: - -
Inbound Rules for Rancher Nodes
- -| Protocol | Port | Source | Description | -|-----|-----|----------------|---| -| TCP | 22 | RKE CLI | SSH provisioning of node by RKE | -| TCP | 80 | Load Balancer/Reverse Proxy | HTTP traffic to Rancher UI/API | -| TCP | 443 | | HTTPS traffic to Rancher UI/API | -| TCP | 6443 | Kubernetes API clients | HTTPS traffic to Kubernetes API | - -
Outbound Rules for Rancher Nodes
- -| Protocol | Port | Destination | Description | -|-----|-----|----------------|---| -| TCP | 443 | git.rancher.io | Rancher catalog | -| TCP | 22 | Any node created using a node driver | SSH provisioning of node by node driver | -| TCP | 2376 | Any node created using a node driver | Docker daemon TLS port used by node driver | -| TCP | 6443 | Hosted/Imported Kubernetes API | Kubernetes API server | -| TCP | Provider dependent | Port of the Kubernetes API endpoint in hosted cluster | Kubernetes API | - -
- ### Ports for Rancher Server Nodes on RKE2
diff --git a/i18n/zh/docusaurus-plugin-content-docs/current/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md b/i18n/zh/docusaurus-plugin-content-docs/current/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md index 0bf72d2e721..eb127681b42 100644 --- a/i18n/zh/docusaurus-plugin-content-docs/current/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md +++ b/i18n/zh/docusaurus-plugin-content-docs/current/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md @@ -15,7 +15,7 @@ import PortsImportedHosted from '@site/src/components/PortsImportedHosted' 不同的 Rancher Server 架构有不同的端口要求。 -Rancher 可以安装在任何 Kubernetes 集群上。如果你的 Rancher 安装在 K3s、RKE 或 RKE2 Kubernetes 集群上，请参考下面的标签页。对于其他 Kubernetes 发行版，请参见该发行版的文档，了解集群节点的端口要求。 +Rancher 可以安装在任何 Kubernetes 集群上。如果你的 Rancher 安装在 K3s 或 RKE2 Kubernetes 集群上，请参考下面的标签页。对于其他 Kubernetes 发行版，请参见该发行版的文档，了解集群节点的端口要求。 :::note 注意事项： @@ -66,54 +66,6 @@ K3s server 需要开放端口 6443 才能供节点访问。
-### RKE 上 Rancher Server 节点的端口 - -
- 单击展开 - -通常情况下，Rancher 安装在三个 RKE 节点上，这些节点都有 etcd、controlplane 和 worker 角色。 - - - -下表描述了 Rancher 节点之间流量的端口要求： - -
Rancher 节点的流量规则
- -| 协议 | 端口 | 描述 | -|-----|-----|----------------| -| TCP | 443 | Rancher Agents | -| TCP | 2379 | etcd 客户端请求 | -| TCP | 2380 | etcd 对等通信 | -| TCP | 6443 | Kubernetes apiserver | -| TCP | 8443 | NGINX Ingress 的验证 Webhook | -| UDP | 8472 | Canal/Flannel VXLAN 覆盖网络 | -| TCP | 9099 | Canal/Flannel livenessProbe/readinessProbe | -| TCP | 10250 | Metrics Server 与所有节点的通信 | -| TCP | 10254 | Ingress controller livenessProbe/readinessProbe | - -下表描述了入站和出站流量的端口要求： - -
Rancher 节点的入站规则
- -| 协议 | 端口 | 源 | 描述 | -|-----|-----|----------------|---| -| TCP | 22 | RKE CLI | RKE 通过 SSH 配置节点 | -| TCP | 80 | 负载均衡器/反向代理 | 到 Rancher UI/API 的 HTTP 流量 | -| TCP | 443 | | 到 Rancher UI/API 的 HTTPS 流量 | -| TCP | 6443 | Kubernetes API 客户端 | 到 Kubernetes API 的 HTTPS 流量 | - -
Rancher 节点的出站规则
- -| 协议 | 端口 | 目标 | 描述 | -|-----|-----|----------------|---| -| TCP | 443 | git.rancher.io | Rancher catalog | -| TCP | 22 | 使用 Node Driver 创建的任何节点 | Node Driver 通过 SSH 配置节点 | -| TCP | 2376 | 使用 Node Driver 创建的任何节点 | Node Driver 使用的 Docker daemon TLS 端口 | -| TCP | 6443 | 托管/导入的 Kubernetes API | Kubernetes API Server | -| TCP | 提供商依赖 | 托管集群中 Kubernetes API 端点的端口 | Kubernetes API | - -
- ### RKE2 上 Rancher Server 节点的端口
diff --git a/i18n/zh/docusaurus-plugin-content-docs/version-2.12/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md b/i18n/zh/docusaurus-plugin-content-docs/version-2.12/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md index 0bf72d2e721..eb127681b42 100644 --- a/i18n/zh/docusaurus-plugin-content-docs/version-2.12/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md +++ b/i18n/zh/docusaurus-plugin-content-docs/version-2.12/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md @@ -15,7 +15,7 @@ import PortsImportedHosted from '@site/src/components/PortsImportedHosted' 不同的 Rancher Server 架构有不同的端口要求。 -Rancher 可以安装在任何 Kubernetes 集群上。如果你的 Rancher 安装在 K3s、RKE 或 RKE2 Kubernetes 集群上，请参考下面的标签页。对于其他 Kubernetes 发行版，请参见该发行版的文档，了解集群节点的端口要求。 +Rancher 可以安装在任何 Kubernetes 集群上。如果你的 Rancher 安装在 K3s 或 RKE2 Kubernetes 集群上，请参考下面的标签页。对于其他 Kubernetes 发行版，请参见该发行版的文档，了解集群节点的端口要求。 :::note 注意事项： @@ -66,54 +66,6 @@ K3s server 需要开放端口 6443 才能供节点访问。
-### RKE 上 Rancher Server 节点的端口 - -
- 单击展开 - -通常情况下，Rancher 安装在三个 RKE 节点上，这些节点都有 etcd、controlplane 和 worker 角色。 - - - -下表描述了 Rancher 节点之间流量的端口要求： - -
Rancher 节点的流量规则
- -| 协议 | 端口 | 描述 | -|-----|-----|----------------| -| TCP | 443 | Rancher Agents | -| TCP | 2379 | etcd 客户端请求 | -| TCP | 2380 | etcd 对等通信 | -| TCP | 6443 | Kubernetes apiserver | -| TCP | 8443 | NGINX Ingress 的验证 Webhook | -| UDP | 8472 | Canal/Flannel VXLAN 覆盖网络 | -| TCP | 9099 | Canal/Flannel livenessProbe/readinessProbe | -| TCP | 10250 | Metrics Server 与所有节点的通信 | -| TCP | 10254 | Ingress controller livenessProbe/readinessProbe | - -下表描述了入站和出站流量的端口要求： - -
Rancher 节点的入站规则
- -| 协议 | 端口 | 源 | 描述 | -|-----|-----|----------------|---| -| TCP | 22 | RKE CLI | RKE 通过 SSH 配置节点 | -| TCP | 80 | 负载均衡器/反向代理 | 到 Rancher UI/API 的 HTTP 流量 | -| TCP | 443 | | 到 Rancher UI/API 的 HTTPS 流量 | -| TCP | 6443 | Kubernetes API 客户端 | 到 Kubernetes API 的 HTTPS 流量 | - -
Rancher 节点的出站规则
- -| 协议 | 端口 | 目标 | 描述 | -|-----|-----|----------------|---| -| TCP | 443 | git.rancher.io | Rancher catalog | -| TCP | 22 | 使用 Node Driver 创建的任何节点 | Node Driver 通过 SSH 配置节点 | -| TCP | 2376 | 使用 Node Driver 创建的任何节点 | Node Driver 使用的 Docker daemon TLS 端口 | -| TCP | 6443 | 托管/导入的 Kubernetes API | Kubernetes API Server | -| TCP | 提供商依赖 | 托管集群中 Kubernetes API 端点的端口 | Kubernetes API | - -
- ### RKE2 上 Rancher Server 节点的端口
diff --git a/versioned_docs/version-2.12/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md b/versioned_docs/version-2.12/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md index f7a15e9de27..8f291a22390 100644 --- a/versioned_docs/version-2.12/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md +++ b/versioned_docs/version-2.12/getting-started/installation-and-upgrade/installation-requirements/port-requirements.md @@ -19,7 +19,7 @@ The following table lists the ports that need to be open to and from nodes that The port requirements differ based on the Rancher server architecture. -Rancher can be installed on any Kubernetes cluster. For Rancher installs on a K3s, RKE, or RKE2 Kubernetes cluster, refer to the tabs below. For other Kubernetes distributions, refer to the distribution's documentation for the port requirements for cluster nodes. +Rancher can be installed on any Kubernetes cluster. For Rancher installs on a K3s or RKE2 Kubernetes cluster, refer to the tabs below. For other Kubernetes distributions, refer to the distribution's documentation for the port requirements for cluster nodes. :::note Notes: @@ -70,52 +70,6 @@ The following tables break down the port requirements for inbound and outbound t
-### Ports for Rancher Server Nodes on RKE - -
- Click to expand - -Typically Rancher is installed on three RKE nodes that all have the etcd, control plane and worker roles. - -The following tables break down the port requirements for traffic between the Rancher nodes: - -
Rules for traffic between Rancher nodes
- -| Protocol | Port | Description | -|-----|-----|----------------| -| TCP | 443 | Rancher agents | -| TCP | 2379 | etcd client requests | -| TCP | 2380 | etcd peer communication | -| TCP | 6443 | Kubernetes apiserver | -| TCP | 8443 | Nginx Ingress's Validating Webhook | -| UDP | 8472 | Canal/Flannel VXLAN overlay networking | -| TCP | 9099 | Canal/Flannel livenessProbe/readinessProbe | -| TCP | 10250 | Metrics server communication with all nodes | -| TCP | 10254 | Ingress controller livenessProbe/readinessProbe | - -The following tables break down the port requirements for inbound and outbound traffic: - -
Inbound Rules for Rancher Nodes
- -| Protocol | Port | Source | Description | -|-----|-----|----------------|---| -| TCP | 22 | RKE CLI | SSH provisioning of node by RKE | -| TCP | 80 | Load Balancer/Reverse Proxy | HTTP traffic to Rancher UI/API | -| TCP | 443 | | HTTPS traffic to Rancher UI/API | -| TCP | 6443 | Kubernetes API clients | HTTPS traffic to Kubernetes API | - -
Outbound Rules for Rancher Nodes
- -| Protocol | Port | Destination | Description | -|-----|-----|----------------|---| -| TCP | 443 | git.rancher.io | Rancher catalog | -| TCP | 22 | Any node created using a node driver | SSH provisioning of node by node driver | -| TCP | 2376 | Any node created using a node driver | Docker daemon TLS port used by node driver | -| TCP | 6443 | Hosted/Imported Kubernetes API | Kubernetes API server | -| TCP | Provider dependent | Port of the Kubernetes API endpoint in hosted cluster | Kubernetes API | - -
- ### Ports for Rancher Server Nodes on RKE2